More Critical RCE’s, Assessing the Impact of F5 Vulnerabilities

On March 10, 2021 F5 released an advisory detailing seven vulnerabilities (four critical RCEs) affecting BIG-IP and many BIG-IQ products; Censys identified ~440,882 exposed hosts globally with the largest concentration in the United States. One of the flaws appears externally exploitable, enabling attackers to compromise devices and use them for lateral movement and persistence. The report urges immediate patching per F5 guidance, provides IoCs and investigator guidance, and suggests using Censys queries to discover affected assets.